Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Zcn0FmbMXupiAqfEdTdXLgHyr8g.roa
File: Zcn0FmbMXupiAqfEdTdXLgHyr8g.roa (raw, json)
Hash identifier: D7NXVKStA+GT8eiZumEOn71vgy8xTwbLhPv6qALPDUc=
Subject key identifier: 65:C9:F4:16:66:CC:5E:EA:62:02:A7:C4:75:37:57:2E:01:F2:AF:C8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 72370B0B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Zcn0FmbMXupiAqfEdTdXLgHyr8g.roa
Signing time: Sun 13 Mar 2022 14:09:56 +0000
ROA not before: Sun 13 Mar 2022 14:09:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1916209931 (0x72370b0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 13 14:09:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=65c9f41666cc5eea6202a7c47537572e01f2afc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e1:ae:1c:0d:0f:9e:6c:37:49:32:16:54:c2:
6a:f6:ec:15:7d:ba:7e:e4:de:e5:80:0b:0b:92:ab:
c7:7a:dd:64:0e:37:7c:0c:61:3c:51:46:77:2e:11:
3e:6f:16:02:09:4b:02:e5:22:08:e4:a6:28:dd:d9:
29:06:13:eb:93:ae:d8:f4:50:b3:70:f8:e3:9e:4c:
8f:0c:c0:74:ff:cb:0c:9f:ec:ae:1e:42:ac:42:ba:
25:2c:17:ff:ca:ab:f4:7a:b2:22:8a:4e:d7:cb:7a:
14:b3:95:86:47:c0:3e:19:d9:fd:4b:0f:72:96:a7:
d0:5a:d0:97:10:68:e5:c0:78:8e:df:35:40:ea:67:
d9:7d:c5:e7:29:e0:63:e4:b3:cb:06:de:65:d8:f1:
40:6c:88:5b:c1:27:49:c1:01:51:05:36:5a:cc:33:
58:d8:d9:ac:98:46:a3:0a:98:14:29:68:79:de:8e:
df:d2:04:f1:c0:29:2b:a0:6b:70:52:da:e5:4a:3d:
a7:6b:ca:f6:2b:fe:44:5d:ff:ef:89:9b:65:0e:d3:
2f:c1:55:34:fb:ac:64:63:d9:8d:d6:e3:7e:60:6f:
2b:c5:96:93:e6:5d:9d:7c:71:4b:86:b3:11:24:58:
55:30:be:13:e1:5b:15:52:d7:c0:83:bb:a2:8c:f1:
d3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C9:F4:16:66:CC:5E:EA:62:02:A7:C4:75:37:57:2E:01:F2:AF:C8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Zcn0FmbMXupiAqfEdTdXLgHyr8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7a:31:79:ca:d5:82:74:fc:f4:00:00:7c:9e:9e:24:fa:c5:1c:
84:e7:06:e7:4c:3e:eb:c6:22:31:53:ab:fd:4a:96:f1:9c:6c:
31:5d:9f:12:61:bb:4f:6f:ba:04:91:37:81:91:39:0f:11:69:
b5:64:8f:95:55:21:15:da:fd:ff:fe:9c:a3:a5:c2:85:50:00:
c0:42:18:9d:61:76:0c:c0:cf:d1:de:2e:21:dc:14:f7:38:3e:
aa:fe:2b:e7:2f:4d:3a:ff:da:00:f7:d0:21:df:6d:44:30:18:
37:4a:8d:2f:de:18:2d:90:73:59:66:28:f5:bd:90:7e:95:9d:
c6:9c:1b:f0:f1:99:59:57:b6:35:82:44:fd:5a:e1:f9:db:1f:
56:ae:0a:92:69:98:f7:bd:d1:cb:06:79:54:7e:db:1f:72:ef:
a7:13:8b:8f:18:00:d7:0a:3c:b5:45:9d:18:1d:29:c7:46:83:
79:ce:8d:79:00:c6:56:08:95:cb:eb:3c:78:67:cd:94:9b:8e:
76:71:96:7e:cd:03:f3:c0:dd:8f:97:e9:be:f8:12:3f:53:4c:
0c:bb:79:f9:62:4c:c7:e2:b4:d0:44:9e:7c:c1:89:ba:7c:65:
df:ab:98:90:8a:fb:c8:39:39:92:f9:3d:27:af:4c:7e:88:2f:
69:b1:16:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 14:35:28 2025 by rpki-client